Interesting. This might give you some ideas, https://stackoverflow.com/questions/2979174/how-do-i-compute-the-approximate-entropy-of-a-bit-string. Or maybe use a password strength checker. If it's too great of a password, maybe it's a terrible variable/package/hashkey name.